---
title: AWS Inspector
description: Route Amazon Inspector findings to Coralogix through an Amazon EventBridge rule and API destination.
url: https://coralogix.com/docs/integrations/aws/aws-inspector/
product: snowbit
feature: CSPM
feature_id: cspm
feature_identifier: snowbit/cspm
last_updated: '2026-09-02'
---

# AWS Inspector

[AWS Inspector](https://aws.amazon.com/inspector/) continually scans AWS workloads for software vulnerabilities and unintended network exposure, combining agent-based and agentless assessments across network, host, and application security. Routing its findings to Coralogix through [Amazon EventBridge](https://aws.amazon.com/eventbridge/) puts vulnerability data next to the rest of your AWS telemetry.

## What you need

* An EventBridge API destination and connection pointing at Coralogix. Create them by following the [EventBridge integration](https://coralogix.com/docs/integrations/aws/aws-eventbridge.md).
* Permission to create EventBridge rules and IAM execution roles in the account Inspector runs in.

## Create the EventBridge rule

1

<!-- -->

.

Define the rule

In EventBridge, create a rule. Enter a **Name**, select the **Event bus** the findings arrive on, and set **Rule type** to **Rule with an event pattern**. Select **Next**.

[![EventBridge Define rule detail page with name, event bus, and rule type set to a rule with an event pattern](/docs/assets/images/Screenshot-2023-03-07-at-12.33.46-1024x802-7ceef5904401962dc17f42e10b03ff04.webp)](https://coralogix.com/docs/assets/images/Screenshot-2023-03-07-at-12.33.46-1024x802-7ceef5904401962dc17f42e10b03ff04.webp)

Shows the rule detail step, where the event bus and rule type are chosen.

2

<!-- -->

.

Match Inspector findings

Under **Event pattern**, set **Event source** to **AWS services**, **AWS service** to **Inspector2**, and **Event type** to **Inspector2 Finding**. EventBridge builds the matching pattern for you.

[![EventBridge event pattern step with Inspector2 selected as the AWS service and Inspector2 Finding as the event type](/docs/assets/images/Screenshot-2023-03-07-at-12.35.57-1024x626-267018be5000fc751d52293f1c9b1bba.webp)](https://coralogix.com/docs/assets/images/Screenshot-2023-03-07-at-12.35.57-1024x626-267018be5000fc751d52293f1c9b1bba.webp)

Shows the generated pattern that matches on `aws.inspector2` and the `Inspector2 Finding` detail type.

3

<!-- -->

.

Point the rule at Coralogix

For the target, set **Target types** to **EventBridge API destination** and select the destination you created. Create a new **Execution role**, or select **Use existing role** and pick one. Select **Next**.

4

<!-- -->

.

Finish

Add **Tags** if you want them, select **Next**, then **Create rule**.

## Related resources

[Amazon EventBridge integration](https://coralogix.com/docs/integrations/aws/aws-eventbridge.md)[Send-Your-Data API key](https://coralogix.com/docs/user-guides/account-management/api-keys/send-your-data-api-key.md)